The formmail script is actually a "symbolic link" to the real script which is stored in a centralized location on the server. The reason for this is so that we can easily update the script if there are new security holes found in it.

formmail scripts are often used by spammers to send out spam to other users from your domain.